Methods and systems for bridging network packets transmitted over heterogeneous media channels are provided. According to one embodiment, a network-computing device comprises multiple network interfaces (netmods) and a shared processing resource. The shared processing resource executes a virtual bridging application representing a single bridging domain for all network packets received by the network-computing device. A translation data structure defines translations between a first framing media format and an intermediate format and between the intermediate format and a second framing media format. If the virtual bridging application determines a network packet is to be relayed between a netmod operable to receive network packets encapsulated within the first framing media format and a netmod operable to transmit network packets encapsulated within the second framing media format, then it uses the translation data structures to translate the network packet before relaying the network packet.

Patent
   8503463
Priority
Aug 27 2003
Filed
Jun 06 2011
Issued
Aug 06 2013
Expiry
Apr 15 2024
Extension
232 days
Assg.orig
Entity
Large
13
206
currently ok
1. A network-computing device comprising:
a plurality of network interfaces (netmods), including a first set of netmods operable to receive network packets encapsulated within a first plurality of media transmissions each having a first framing media format of a plurality of framing media formats and a second set of netmods operable to transmit network packets encapsulated within a second plurality of media transmissions each having a second framing media format of the plurality of framing media formats;
a plurality of processing resources coupled to the plurality of netmods and shared by the plurality of netmods, including a first processing resource upon which a virtual bridging application executes, the virtual bridging application representing a single bridging domain for all network packets received by the network-computing device;
a non-transitory memory, accessible to the first processing resource, having stored therein one or more translation data structures defining translations between the first framing media format and an intermediate format and between the intermediate format and the second framing media format;
wherein responsive to receiving a network packet, the first set of netmods pass the network packet to the virtual bridging application;
the virtual bridging application determines a relay location to which the network packet is to be relayed and whether the relay location is among the second set of netmods, which are associated with a disparate framing media format and a disparate media channel than that of the first set of netmods;
responsive to an affirmative determination that the relay location is among the second set of netmods, the virtual bridging application uses the one or more translation data structures to translate the network packet to the second framing media format before relaying the network packet to the relay location.
2. The network-computing device of claim 1, wherein an intersection of the first set of netmods and the second set of netmods results in a non-null set.
3. The network-computing device of claim 1, wherein an intersection of the first set of netmods and the second set of netmods results in a null set.
4. The network-computing device of claim 1, wherein the virtual bridging application is configurable to accommodate framing media translations desired to be performed by the network-computing device.
5. The network-computing device of claim 1, wherein the virtual bridging application relays at least the network packet to one or more other applications running on a second processing resource of the plurality of processing resources in order to assist in bridging between a first media channel associated with a first netmod of the first set of netmods and a second media channel associated with a second netmod in the second set of netmods.
6. The network-computing device of claim 1, wherein the plurality of framing media formats include one or more of a Gigabit Ethernet (GigE) format, a Frame relay (FR) format, a Time-Division Multiplexing (TDM) format, an Asynchronous Transfer Mode (ATM) format and a wireless media format.
7. The network-computing device of claim 1, wherein the network-computing device comprises a network router.
8. The network-computing device of claim 1, wherein the network-computing device comprises a network switch.
9. The network-computing device of claim 1, wherein the network-computing device comprises a blade server.
10. The network-computing device of claim 1, wherein the virtual bridging application is dynamically instantiated, configured or modified using a graphical user interface application interfaced to the first processing resource.
11. The network-computing device of claim 1, wherein the virtual bridging application is provided as an application Programming interface (API) library.
12. The network-computing device of claim 11, wherein the API is provided as a Dynamic Linked Library (DLL).
13. The network-computing device of claim 11, wherein the API is provided as a shared library.
14. The network-computing device of claim 1, wherein the virtual bridging application is provided as an object oriented class object having public and private methods.
15. The network-computing device of claim 1, wherein the network packet comprises an Ethernet frame and the virtual bridging application permits media agnostic Ethernet bridging between the first set of netmods and the second set of netmods.

This application is a continuation of U.S. patent application Ser. No. 12/781,807, filed May 17, 2010, now U.S. Pat. No. 7,957,407, which is a continuation of U.S. patent application Ser. No. 10/650,298, filed on Aug. 27, 2003, now U.S. Pat. No. 7,720,095, both of which are hereby incorporated by reference in their entirety for all purposes.

Contained herein is material that is subject to copyright protection. The copyright owner has no objection to the facsimile reproduction of the patent disclosure by any person as it appears in the Patent and Trademark Office patent files or records, but otherwise reserves all rights to the copyright whatsoever. Copyright © 2003-2011, Fortinet, Inc.

1. Field

Embodiments of the present invention generally relate to media packet bridging, and more particularly to bridging heterogeneous media packets received from network interfaces from a processing resource.

2. Description of the Related Art

Ethernet Local Area Networks (LANs) are used to connect multiple computing devices to a network. Generally a LAN configuration is sufficient when the number of computing devices (e.g., computers, appliances, peripherals) communication with one another is relatively small. However, when the number of computing devices increase, multiple networks or network segments will require interconnection. There are a variety of techniques for connecting multiple network segments. One of the easiest and oldest techniques for connecting multiple network segments is using an Ethernet Bridge. Ethernet bridges have multiple Ethernet Network Interfaces, which connect to networks that require a bridge.

Apart from being able to interconnect Ethernet Networks, bridges can also help with segregating network traffic. For example, in an enterprise with 5 departments having 25 computing devices each, on a separate segment is a simple way of connecting all 25 computing devices to a single LAN. While this technique will work, the technique has some obvious disadvantages, since computing devices associated with one department of the enterprise will be disrupted when two computing devices from another department communicate with one another. Thus, a more efficient network design for enterprise is to have a separate LAN for each separate department, where each separate LAN is interconnected with a bridge. In this way, all intra-department traffic will not be present to disrupt other traffic. Moreover, only inter-department traffic will be present on the bridge.

As previously discussed, Ethernet bridges are one of the oldest techniques for interconnecting LANs. Since the inception of Ethernet bridges, they have been enhanced to serve a variety of needs. Once such need relates to connecting (e.g., bridging) multiple LANs that are not in geographic proximity to one another. In these circumstances, Ethernet is transmitted on top of a different framing media (e.g., Asynchronous Transfer Mode (ATM), Gigabit Ethernet (GigE), Frame Relay (FR), Time-Division Multiplexing (TDM), and others). This creates an enhanced bridge with different framing media to external networks.

The enhanced bridge is capable of peeling off the framing headers to detect the Ethernet packet and then performing standard Ethernet bridging operations as if the data were received from a standard LAN interface. This type of enhanced Ethernet Bridge is widely implemented in enterprises with large network branches that are geographically dispersed in order to interconnect the LANs associated with the network branches.

There are a number of conventional products that perform Ethernet bridging over Ethernet media, Ethernet bridging over FR media, Ethernet bridging over ATM media, and the like. However, these conventional products do not permit media agnostic Ethernet bridging. In other words, conventional approaches use a separate and often hardwired network resource that communicates with a specific network interface media. Each network resource is dedicated to a network interface in order to provide Ethernet bridging for a specific media type (e.g. ATM, GigE, FR, TDM, and others) handled by the network interface.

By dedicating network resources to specific network interfaces, an enterprise's heterogeneous networks are not efficiently and flexibly interconnected. Many times the dedicated resources are the result of an enterprise gradually growing its networks, with a later decision to bring the networks together. Alternatively, enterprises can merge previously disconnected departmental networks, or merge with other enterprise networks, and there exist a desire to interconnect the heterogeneous networks. Yet, with conventional approaches the bridging domains for each disparate network are isolated using separate network resources. As one of ordinary skill in the art appreciates, this can be expensive, inflexible, and time consuming for an enterprise to implement.

Therefore, there exist a need for techniques that provide improved heterogeneous network bridging, which are media agnostic. Thus, network resources need not be hardwired or dedicated to a single network interface, and a single bridging domain can be used to bridge all media transmissions.

Methods and systems are described for bridging network packets transmitted over heterogeneous media channels. According to one embodiment, a network-computing device comprises multiple network interfaces (netmods), multiple processing resources and a non-transitory memory. The netmods include a first set of netmods operable to receive network packets encapsulated within a first set of media transmissions each having a first framing media format of multiple framing media formats and a second set of netmods operable to transmit network packets encapsulated within a second set of media transmissions each having a second framing media format of the multiple framing media formats. The processing resources are coupled to and shared by the netmods and include a first processing resource upon which a virtual bridging application executes. The virtual bridging application represents a single bridging domain for all network packets received by the network-computing device. The non-transitory memory is accessible to the first processing resource and has stored therein one or more translation data structures defining translations between the first framing media format and an intermediate format and between the intermediate format and the second framing media format. Responsive to receiving a network packet, the first set of netmods pass the network packet to the virtual bridging application. The virtual bridging application determines a relay location to which the network packet is to be relayed and whether the relay location is among the second set of netmods, which are associated with a disparate framing media format and a disparate media channel than that of the first set of netmods. Responsive to an affirmative determination that the relay location is among the second set of netmods, the virtual bridging application uses the one or more translation data structures to translate the network packet to the second framing media format before relaying the network packet to the relay location.

Other features of embodiments of the present invention will be apparent from the accompanying drawings and from the detailed description that follows.

Embodiments of the present invention are illustrated by way of example, and not by way of limitation, in the figures of the accompanying drawings and in which like reference numerals refer to similar elements and in which:

FIG. 1 shows a diagram of a network packet media bridging system, according to the present invention;

FIG. 2 shows a flow diagram of a method for bridging network packet media, according to the present invention;

FIG. 3 shows a flow diagram of another method for bridging network packet media, according to the present invention; and

FIG. 4 shows a diagram of another network packet media bridging system, according to the present invention.

Methods and systems are described for bridging network packets transmitted over heterogeneous media channels. In the following detailed description of various embodiments of the present invention, reference is made to the accompanying drawings that form a part hereof, and in which is shown by way of illustration specific embodiments in which the invention may be practiced. It is to be understood that other embodiments may be utilized and structural changes may be made without departing from the scope of the present invention.

As used herein, a “network interface” or a “network media interface” (netmods) is a hardware and software-computing device that connects to telecommunications lines associated with network feeds. Netmods are well known to one of ordinary skill in the art. Netmods come in a variety of configurations and are usually distinguished by the number of telecommunication lines that can physically connect to line interface ports of the netmod.

Netmods include firmware and software to process raw packet data being received on a line interface port. Furthermore, some software instructions are processed within a volatile memory of the netmods. For example, some software instructions permit the recognition of separation of network data packets from a data stream being received over a line interface port. Additionally, software instructions can assign and regulate priorities to data packets being sent from the netmods back over a line interface port.

In various embodiments of the present invention, conventional netmods are used to achieve the teachings of the present invention. The netmods are also connected on the backend (e.g., the side opposite the network feed) to a switching fabric that is used to forward a network packet received from the netmod to one or more processing resources. The processing resources include one or more processing elements and memory. Additionally, the processing resources include applications that are used to translate, encrypt/decrypt, authenticate, forward and/or route any network packets received from the switching fabric.

In one embodiment of the present invention, a plurality of netmods, a switching fabric, and a plurality of processing resources are assembled as a network routing/switching device, such as a blade server. The blade server is configured and distributed by Cosine Communications, Inc. of Redwood City, Calif. The blade server can be assembled with a plurality of additional blade servers that interface with one another. Moreover, IPNOS product offerings, distributed by Cosine Communications, Inc. of Redwood City, Calif. can be modified to embody the teachings of the present disclosure. Of course as one of ordinary skill in the art readily appreciates, any hardware, firmware, and/or software configurations/products that are designed to achieve the tenets of the present disclosure can be used. Thus, all such configurations/products are intended to fall within the scope of the present invention.

FIG. 1 illustrates a diagram of a network packet media bridging system 100, according to the present invention. The bridging system 100 includes a plurality of netmods (e.g., 110 and 120), a switching fabric 112, and a processing resource 130. The processing resource 130 includes a bridging application 132 executing on or accessible to the processing resource 130. The netmods (e.g., 110 and 120) are connected to telecommunication lines associated with other networks (e.g., 140 and 150). Connections to the telecommunications lines are made via line interface ports included within the netmods (e.g., 110 and 120).

The netmods (e.g., 110 and 120) include memory and processing elements for receiving network packets from the line interface ports or for sending network packets out over the line interface ports. In some cases, the memory included within the netmods (e.g., 110 and 120) is Static Random Access Memory (SRAM), which is volatile memory permitting fast access to data. Moreover, the netmods (e.g., 110 and 120) are associated with a specific type of media transmission channel (e.g., ATM, GigE, TDM, FR, and the like). Additionally, a netmod (e.g., 110 or 120) can be wireless. Thus, network netmods (e.g., 110 and 120) need not be physically connected to a telecommunications line, but, rather, can be a transceiver for transmitting and receiving wireless (e.g., Radio Frequency (RF), Infrared (IR), Satellite, and the like) network packets.

The switching fabric 112 is hardware, firmware, and, in some instances, software instructions that receive forwarded network data packets from the netmods (e.g., 110 and 120) and rapidly transfer the packet to the processing resource 130. Conventionally, switching fabric is hardwired from a specific netmod to a specific processing resource for each disparate media transmission (e.g., ATM, GigE, TDM, FR, wireless, and the like). The switching fabric 112 can also receive network packets from the processing resource 130 and forward the network packets along to the appropriate netmod (e.g., 110 and 120).

A number of applications executing on the processing resource 130 receives network packets and performs a variety of translations/operations on the network packets, such as forwarding, routing, encryption/decryption, authentication, and the like. Additional applications executing on the processing resource 130 can also be used to communicate with other processing resources (not shown in FIG. 1).

The processing resource 130 includes a bridging application 132. The bridging application 132 translates network packets from disparate media formats received from disparate netmods (e.g., 110 and/or 120). Each network packet received by the bridging application 132 includes metadata associated with the addressing particulars of each network packet. The metadata also includes Ethernet header data that is transmitted on top of the network data packets over the disparate media transmission channels.

The bridging application 132 inspects this metadata to strip the Ethernet header. The Ethernet header data allows the bridging application to associate the network packets with a standard intermediate media format. Moreover, once the network packets are associated with the intermediate format, and the next address locations for the network packets determined, then the bridging application 132 translates the network packets into a media format required of any destination (e.g., next address location) netmod (e.g., 110 and 120).

If the received network packet is in a first media format and is destined to be relayed to a netmod (e.g., 110 or 120) associated with a second media format, then the bridging application 132 uses the metadata information available for each media format and translates the received network packet to the second media format before relaying the network packet along to the appropriate netmod (e.g., 10 or 120) that is handling network traffic associated with the second media format. This is achieved by using the Ethernet header data to first translate the received network packet to Ethernet and then to the second media format.

In one embodiment, the bridging application 132 has access to a translation table that permits it to translate from an Ethernet media format to the desired media formats. The table includes row identifiers for metadata elements and column identifiers for the media formats. Each cell of the table includes the corresponding equivalent for a particular metadata element and a particular media format. For example, a metadata header element can be identified by indexing to a row in the table having an identifier associated with headers, such as “r-x,” where r identifies a row entry and x identifies a specific metadata element. Moreover, the desired translation from Ethernet format to a desired second media format can be acquired by indexing the appropriate column “c-f” for the desired media format, where c represents a column entry and f is the desired media format.

For example if the originally received media format is FR and the desired media format is ATM, then the FR format is first translated to Ethernet using the Ethernet header transmitted on top of the packet in FR format. As one of ordinary skill in the art appreciates, a Frame Relay Access Device (FRAD) can be used to achieve the transmission of Ethernet on top of a FR transmission. Next, a single element of the Ethernet intermediate format is identified as a specific row entry “r-01” within the table, and by accessing the column identifier “c-ATM” associated the desired ATM format; a table cell is constructed by the tuple “r-01, c-ATM”. The tuple provides the appropriate translation information to the bridging application 132 for translating the intermediate Ethernet format to ATM.

Thus, the bridging application 132 translates a network data packet from FR to ATM. Of course a variety of more complex translation can be required, such that the cells of the table process other applications in order to complete the translation from FR to ATM. All such translations are intended to fall within the scope of the present disclosure. Further, it is readily apparent that the bridging application 132 does not require a table for translations, since the logic to perform the translations can be embodied within the bridging application 132.

Thus, in some embodiments, the bridging application 132 can access a more complex table in order to perform the appropriate translations on the media formats, such as when metadata elements of one media format does not map directly (e.g., one to one relationship) to a like metadata element in another media format. In these cases, the cells of the table can include the appropriate translation instructions (e.g., pointers to other applications) or mappings, and the bridging application 132 is adapted to process or initiate these instructions or mappings.

Of course, the bridging application 132 need not include tables at all rather it can access software applications or software objects that assist in performing the appropriate media format translations. Moreover, in some cases, the bridging application 132 can access a plurality of translation tables each linked to one another for purposes of performing the appropriate translations between media formats. Thus, the bridging application need not, in all circumstances, first translate a received network packet to an intermediate Ethernet format. For example, parsing requirements for separating the different elements associated with the metadata of a particular media format can be initially acquired by indexing on the received media data format in order to acquire the appropriate parsing instructions for the received metadata. Furthermore, as one of ordinary skill in the art readily appreciates, the translation information included within any cell of a table can be a direct mapping or a pointer to another application that knows how to perform the appropriate translation to a desired format. In this way, the translation information can be more complex and used to execute additional applications. And, in some cases, the additional applications can reside on additional and separate processing resources from the one in which the bridging application 132 is executing.

Furthermore, in some embodiments, the bridging application 132 can be instantiated, designed, and/or configured from a Graphical User Interface (GUI) application interfaced to the processing resource 130. Thus, as more translations between disparate media formats are desired, the bridging application 132 can be configured to accommodate the translation. Moreover, the configuration can be dynamic, so that the bridging application 132 need not be recompiled and re-linked when modifications are made. This can be achieved by using dynamic objects that are dynamically bound to the bridging application 132, or in the cases where the bridging application 132 acquires translation information from a dynamically modifiable table.

Accordingly, network packets associated with disparate media formats are received from different netmods and relayed to a single processing resource 130 having access to a bridging application 132. The bridging application 132 provides a virtual bridge between the disparate media formats, by translating the media formats of the network packets, as needed, before relaying any translated network packet to an appropriate netmod (e.g., 110 or 120).

As is now apparent to one of ordinary skill in the art, the present embodiments of the bridging system 100 offers significant improvements over conventional techniques, since a single processing resource 130 can execute a bridging application 132, which acts as a single bridging domain for all network packets. The virtual bridging system 100 is, therefore, not hardwired (as what has been conventionally required), and the virtual bridging system 100 can be dynamically configured and modified to adjust to the changing network patterns and needs of a network.

FIG. 2 illustrates a flow diagram of a method 200 for bridging network packet media, according to the present invention. In one embodiment, of FIG. 2 the method 200 is implemented within a high-density server or blade server having a plurality of netmods, a switching fabric, and a plurality of processing resources. In other embodiments, the method 200 is implemented within any network router, network switch, or network-computing device. Each processing resource, can receive network packets from a number of the netmods, where each netmod is associated with a different media transmission channel and media format (e.g., ATM, GigE, TDM, FR, wireless, and the like). Of course, any configuration of computing devices implementing method 200 is intended to fall within the scope of the present disclosure.

In 210, a first netmod receives a first network packet from a first media channel, and, in 220, a second netmod receives a second network packet from a second media channel. Each network packet is in a data format associated with its respective media channel. The first and second netmods are designed to relay or steer the received network packets to a single processing resource, as depicted in 230. In some embodiments, the first and second packets also include Ethernet transmitted on top of its native media data format.

The processing resource includes a bridging application, which is processed when the packets are received by the processing resource. The bridging application can execute one or more instructions and/or access one or more tables (or any data structures) in order to bridge the first network packet to the second media channel, as depicted in 240. Additionally, the bridging application can execute one or more instructions and/or access one or more tables to bridge the second network packet to the first media transmission channel, as depicted in 250.

In some embodiments, and in 260, the bridging application inspects the network packets for addressing information or metadata information. The information associated with any received network packet is inspected to determine where the received network packet is to be relayed next. If the relay location is a netmod associated with a disparate media format and a disparate media channel from what the received network packet was originally received in, then the bridging application translates the received network packet to an intermediate Ethernet format by using the network packet's Ethernet header included with the network packet. The intermediate Ethernet format is then used to translate the network packet to a destination media format before relaying the network packet to the appropriate netmod. In some cases, this translation can entail converting only the metadata information associated with the network packet.

In some instances, the bridging application can determine, upon inspecting a received network packet, that to properly translate the received network packet, one or more transfers need to occur by relaying the network packet to a second application residing on a second processing resource, as depicted in 270. Alternatively, the bridging application can relay the received network packet to a second application executing on the same processing resource as the bridging application.

The bridging application is a virtual bridge between heterogeneous network packet media. In some embodiments, the bridging application can be dynamically instantiated, configured, and/or modified by using a GUI application interfaced to the processing resource. Thus, method 200 provides a virtual bridge from within a single processing resource to translate between disparate media formats and disparate media channels. This virtual bridge provides a single bridging domain for network packets of disparate media formats.

FIG. 3 illustrates a flow diagram of another method 300 to bridge network packet media, according to the present invention. In some embodiments, the method 300 is implemented within a high-density or blade server. The blade server includes a plurality of network interfaces, a switching fabric, and a plurality of processing resources. Additionally, the method 300 can be implemented within any network router, network switch, or network-computing device. However, any configuration of computing devices implementing method 300 is intended to fall within the scope of the present disclosure.

In 310, a first network packet is received and is identified as being associated with a first media format (e.g., GigE, ATM, FR, TDM, wireless, or others). Additionally, in 320, a second network packet is received and is identified with a second media format. In some embodiments, the network packets are received from disparate netmods where each netmod is designed to relay and transmit network packets from and to a specific media transmission channel (e.g., GigE, ATM, FR, TDM, wireless, or others).

In 330, a translation data structure is accessed to translate the second network packet from the second media format to the first media format. Additionally, in some embodiments, and in 340, the translation data structure is accessed to translate the first network packet from the first media format to the second media format. In this way, the translation data structure acts as a virtual bridge between disparate media formats associated with the network packets. Further, in one embodiment, the first and second network packets are translated to Ethernet format before translation to a desired media format occurs. This can occur, when the network packets also include Ethernet transmitted on top of their native media formats.

In some embodiments, the translation data structure is configurable and instantiated within a single processing resource by using a GUI application interfaced to the processing resource and the translation data structure, as depicted in 350. The translation data structure can be one or more data structures (e.g., tables, lists, trees, and the like) logically linked together. Moreover, information within the translation data structure can permit the execution of instructions (e.g., pointers to other external applications) in order to assist with translation between heterogeneous media formats.

Moreover, in some cases, the translation data structure can be implemented within a bridging application that executes on a single processing resource, where the processing resource receives the network packets from a plurality of netmods associated with disparate or different media transmission channels and formats.

Once, the translation data structure is accessed to translate or bridge the disparate media formats, then, in 360, the translated network packet is provided to the appropriate netmod associated with the translated media format. Thus, the translation data structure is used as a virtual bridge between heterogeneous packet media. The translation data structure is dynamically configurable and modifiable to accommodate a plurality of media translations desired within a network.

Also, as one of ordinary skill in the art will readily appreciate, translation data structure is used on Layer 3 (e.g., network or IP layer), and is capable of linking the necessary metadata associated with addressing various media formats. Metadata includes header information and other information used in resolving network packet addresses. Disparate media formats can include disparate metadata. Conventional approaches resolve the disparate addressing between media formats by dedicating a single processing resource having applications that are used to translate the metadata for each media format. In the present invention, a single processing resource utilizes application(s) that accesses the translation data structure for received and translated network packets, in order to bridge heterogeneous packet media. Thus, in various embodiments of the present invention, a single bridging domain is provided for media bridging.

FIG. 4 illustrates a diagram of another network packet media bridging system 400, according to the present invention. The media bridging system 400 includes a plurality of netmods (e.g., 410 and 420), a relaying data structure (e.g., 412 and 422) for each netmod (e.g., 410 and 420), and a bridging application 432 that resides in a processing resource 430. The bridging system 400 can be implemented in a high-density or blade server. Alternatively, the bridging system 400 can be implemented in any network router, network switch, of network computing device. Of course, other configurations of computing devices that provide the media bridging of the present invention can also be implemented, without departing from the present invention.

Each netmod (e.g., 410 and 420) includes a plurality of line interface ports (not depicted in FIG. 4). The line interface ports accept network traffic from a telecommunications line (a transceiver when the network traffic is wireless). The netmods (e.g., 410 and 420) identify and select network packets from the network traffic occurring on the line interface ports. Each of the netmods (e.g., 410 and 420) is associated with different media channels (e.g., GigE, ATM, TDM, FR, wireless, and others).

The relaying data structures (e.g., 412 and 422) are accessed when network packets are identified by the netmods (e.g., 410 and 420). The relaying data structures (e.g., 412 and 422) permit the netmods (e.g., 410 and 420) to relay the network packets to the processing resource 430. The relaying data structures (e.g., 412 and 422) are dynamically configurable within the processing resource 430 and provided to the netmods (e.g., 410 and 420). In some embodiments, the relaying data structures (e.g., 412 and 422) are represented as SRAM tables within the netmods (e.g., 410 and 420). The SRAM tables (e.g., 412 and 422) can include identifiers for the processing resource 430, the netmods (e.g., 410 and 420), and identifiers for line interface ports (not depicted in FIG. 4).

When the network packets are relayed from the netmods (e.g., 410 and 420), they can include an Ethernet transmitted on top of the native media format. However, the metadata-addressing format of the network packets may still be in a format associated with the original media channel format.

The bridging application 432 receives the relayed network packets and detects the original media channel formats for the network packets based on metadata associated with the network packets. The bridging application 432 then translates a number of the network packets from a received media channel format to a requisite media channel format, based on where a particular network packet is to be relayed to next. Yet, as one of ordinary skill in the art readily recognizes, this translation can be done on an Ethernet format, when the network packets include Ethernet on top of their native media formats. Finally, the bridging application 432 translates any number of the network packets from the received media channel formats to requisite media channel formats. In this way, the bridging application 432 uses metadata associated with disparate media formats to bridge the network packets between heterogeneous media formats using traditional Ethernet, or any other intermediate media channel format transmitted on top of the network packets along with their native media formats.

In one embodiment, the bridging application 432 communicates with one or more additional processing resources (e.g., 440 and 450). The bridging application 432 can use these additional processing resources (e.g., 440 and 450) to assist in bridging between heterogeneous media formats. In this way, processing can be offloaded from the processing resource 430 to the additional processing resources (e.g., 440 and 450).

In some embodiments, the bridging application 432 is dynamically instantiated and configured through a GUI application communicating with the processing resource 430. The configurations can include parameters that identify the media formats that the bridging application 432 is capable and permissibly allowed to bridge. The bridging application 432 can be provided as an Application Programming Interface (API) library, or as an OO class object having public and private methods. The API can be provided as a Dynamic Linked Library (DLL) or a shared library. Of course, any implementation, including stand alone ad hoc implementations, of the bridging application 432 that is designed to bridge heterogeneous media formats from a single processing resource 430 is intended to fall within the scope of the present invention. Moreover, the bridging application 432 can use one or more tables or other data structures to bridge heterogeneous media formats.

Methods and systems detailed above packet media bridging in a network. These methods and systems create a single media bridge domain for use in network routing environments. In contrast, traditional approaches have relied on hardwired and static implementations of switches and media bridges, thereby creating a plurality of media bridging domains. Accordingly, the present invention permits better utilization and load balancing of an enterprise's network routing resources.

Furthermore, the virtual media bridges of the present invention are dynamically configurable to meet the changing needs of an enterprise's network traffic. In some embodiments, the configuration of the virtual bridges can be altered using a GUI application in communication with a processing resource. Moreover, the processing and memory capabilities of the processing resource can be published and made available within the GUI application. In this way, an enterprise can monitor and alter network traffic as needed with the teachings of the present invention, without the need to acquire additional hardware and software resources.

Although specific embodiments have been illustrated and described herein, it will be appreciated by one of ordinary skill in the art that any arrangement that is calculated to achieve the same purpose may be substituted for the specific embodiments shown. This application is intended to cover any adaptations or variations of the present invention. Therefore, it is intended that this invention be limited only by the claims and the equivalents thereof.

Balay, Rajesh, Sargor, Chandramouli, Desai, Sachin

Patent Priority Assignee Title
8583800, Sep 13 2000 Fortinet, Inc. Packet routing system and method
8644311, Nov 18 2002 Fortinet, Inc. Hardware-accelerated packet multicasting in a virtual routing system
8953513, Sep 24 2004 Fortinet, Inc. Scalable IP-services enabled multicast forwarding with efficient resource utilization
9143351, Jun 28 2001 Fortinet, Inc. Identifying nodes in a ring network
9160716, Sep 13 2000 Fortinet, Inc. Tunnel interface for securing traffic over a network
9258280, Sep 13 2000 Fortinet, Inc. Tunnel interface for securing traffic over a network
9331961, Aug 27 2003 Fortinet, Inc. Heterogeneous media packet bridging
9391964, Sep 13 2000 Fortinet, Inc. Tunnel interface for securing traffic over a network
9509638, Aug 27 2003 Fortinet, Inc. Heterogeneous media packet bridging
9667604, Sep 13 2000 Fortinet, Inc. Tunnel interface for securing traffic over a network
9853917, Aug 27 2003 Fortinet, Inc. Heterogeneous media packet bridging
9853948, Sep 13 2000 Fortinet, Inc. Tunnel interface for securing traffic over a network
9959610, Oct 30 2014 Applied Materials, Inc System and method to detect substrate and/or substrate support misalignment using imaging
Patent Priority Assignee Title
4667287, Oct 28 1982 HEWLETT-PACKARD DEVELOPMENT COMPANY, L P Multiprocessor multisystem communications network
4667323, Sep 03 1985 Allen-Bradley Company Industrialized token passing network
4726018, Aug 25 1986 International Business Machines Corporation Method of providing priority access to a transmission communication ring
5473599, Apr 22 1994 Cisco Technology, Inc Standby router protocol
5483525, Dec 30 1993 SAMSUNG ELECTRONICS CO , LTD KOREA Assignment method and apparatus of virtual path and virtual channel identifiers in an asynchronous transfer mode
5490252, Sep 30 1992 Rockstar Consortium US LP System having central processor for transmitting generic packets to another processor to be altered and transmitting altered packets back to central processor for routing
5491691, Aug 16 1994 NXP, B V F K A FREESCALE SEMICONDUCTOR, INC Method and apparatus for pacing asynchronous transfer mode (ATM) data cell transmission
5550816, Dec 29 1994 NETWORK SYSTEMS CORP Method and apparatus for virtual switching
5581705, Dec 13 1993 Hewlett Packard Enterprise Development LP Messaging facility with hardware tail pointer and software implemented head pointer message queue for distributed memory massively parallel processing system
5598414, Feb 06 1991 Access to transmit on a message priority basis
5633866, Nov 17 1995 RPX CLEARINGHOUSE LLC Method and apparatus for routing packets in networks having connection-oriented subnetworks
5745778, Jan 26 1994 Data General Corporation Apparatus and method for improved CPU affinity in a multiprocessor system
5825772, Nov 15 1995 Extreme Networks, Inc Distributed connection-oriented services for switched communications networks
5825891, Jan 16 1996 CLOUDING CORP Key management for network communication
5841973, Mar 13 1996 Hewlett Packard Enterprise Development LP Messaging in distributed memory multiprocessing system having shell circuitry for atomic control of message storage queue's tail pointer structure in local memory
5875290, Mar 27 1997 International Business Machines Corporation Method and program product for synchronizing operator initiated commands with a failover process in a distributed processing system
5892924, Jan 31 1996 Foundry Networks, LLC Method and apparatus for dynamically shifting between routing and switching packets in a transmission network
5920705, Jan 31 1996 Foundry Networks, LLC Method and apparatus for dynamically shifting between routing and switching packets in a transmission network
5963555, Sep 03 1996 Hitachi, LTD Router apparatus using ATM switch
5964847, Mar 10 1997 Lenovo PC International Mobile client computer interacting with docking device
5987521, Jul 10 1995 IBM Corporation Management of path routing in packet communications networks
6014382, Apr 04 1996 Hitachi, Ltd. ATM switching system including a switching control portion for distributing call set-up requirement signals
6032193, Mar 20 1997 VARITEK INDUSTRIES, INC Computer system having virtual circuit address altered by local computer to switch to different physical data link to increase data transmission bandwidth
6047330, Jan 20 1998 Meta Platforms, Inc Virtual router discovery system
6069895, Aug 29 1997 RPX CLEARINGHOUSE LLC Distributed route server
6085238, Apr 23 1996 PANASONIC ELECTRIC WORKS CO , LTD Virtual LAN system
6094674, May 06 1994 Hitachi, Ltd. Information processing system and information processing method and quality of service supplying method for use with the system
6098110, Dec 30 1996 Hewlett Packard Enterprise Development LP Network switch with a multiple bus structure and a bridge interface for transferring network data between different buses
6118791, Dec 20 1995 Cisco Technology, Inc Adaptive bandwidth allocation method for non-reserved traffic in a high-speed data transmission network, and system for implementing said method
6134226, Dec 31 1998 Google Technology Holdings LLC Method and system for allocating a system resource to subscribers of a wireless communications system
6137777, Dec 29 1997 EMC IP HOLDING COMPANY LLC Control tool for bandwidth management
6169739, Jan 08 1997 Ciena Corporation ATM VLAN multi-protocol client-server system using layer-3 header of packets for transporting connectionless and connection-oriented traffic
6169793, Dec 24 1996 NEUSTAR, INC Systems and methods for providing order and service mediation for telecommunications systems
6173399, Jun 12 1997 AVAYA Inc Apparatus for implementing virtual private networks
6175867, Mar 23 1998 Verizon Patent and Licensing Inc System and method for managing networks addressed via common network addresses
6192051, Feb 26 1999 Juniper Networks, Inc Network router search engine using compressed tree forwarding table
6212556, Nov 13 1995 ARUNACHALAM, LAKSHMI, DR Configurable value-added network (VAN) switching
6220768, Jun 28 1996 Oracle America, Inc Network asset survey tool for gathering data about node equipment
6226788, Jul 22 1998 Cisco Technology, Inc Extensible network management system
6243580, Nov 30 1995 ATC Technologies, LLC Priority and preemption service system for satellite related communication using central controller
6246682, Mar 05 1999 F POSZAT HU, L L C Method and apparatus for managing multiple ATM cell queues
6249519, Apr 16 1998 Mantra Communications Flow based circuit steering in ATM networks
6256295, Sep 25 1997 RPX CLEARINGHOUSE LLC Method and apparatus for determining multiple minimally-overlapping paths between nodes in a network
6260072, Jun 12 1997 Lucent Technologies Inc Method and apparatus for adaptive routing in packet networks
6260073, Dec 30 1996 Hewlett Packard Enterprise Development LP Network switch including a switch manager for periodically polling the network ports to determine their status and controlling the flow of data between ports
6266695, Dec 23 1997 ALCATEL USA SOURCING, L P Telecommunications switch management system
6272500, Dec 10 1996 Fujitsu Limited Object-oriented device management system and method
6278708, Apr 10 1998 Cisco Technology, Inc Frame relay access device with user-configurable virtual circuit bundling
6286038, Aug 03 1998 CIENA LUXEMBOURG S A R L ; Ciena Corporation Method and apparatus for remotely configuring a network device
6295297, Dec 29 1997 SAMSUNG ELECTRONICS CO , LTD Gateway for connecting ATM-based access network to existing network
6298130, Sep 30 1997 Genesys Telecommunications Laboratories Inc. Metadata-based network routing
6324583, Nov 17 1998 International Business Machines Corp. Method and apparatus for enabling communication between dissimilar protocol stacks
6330602, Apr 14 1997 AVAYA Inc Scaleable web server and method of efficiently managing multiple servers
6338092, Sep 24 1998 International Business Machines Corporation Method, system and computer program for replicating data in a distributed computed environment
6339782, Nov 21 1997 International Business Machines Corporation Persistence mechanism and method for objects
6343083, Apr 09 1998 ALCATEL USA SOURCING, L P Method and apparatus for supporting a connectionless communication protocol over an ATM network
6405262, Jul 14 1995 Microsoft Technology Licensing, LLC Efficient inter-process object and interface pinging
6414595, Jun 16 2000 Ciena Corporation Method and system for processing alarm objects in a communications network
6434619, Apr 29 1998 Alcatel Lucent Internet-enabled service management system and method
6449650, Feb 01 1999 Ericsson AB Methods and apparatus for deploying quality of service policies on a data communication network
6453406, Oct 17 1990 Hewlett Packard Enterprise Development LP Multiprocessor system with fiber optic bus interconnect for interprocessor communications
6463061, Dec 23 1997 Cisco Technology, Inc. Shared communications network employing virtual-private-network identifiers
6466976, Dec 03 1998 RPX CLEARINGHOUSE LLC System and method for providing desired service policies to subscribers accessing the internet
6487666, Jan 15 1999 Cisco Technology, Inc. Intrusion detection signature analysis using regular expressions and logical operators
6493349, Nov 13 1998 RPX CLEARINGHOUSE LLC Extended internet protocol virtual private network architectures
6526056, Dec 23 1997 Cisco Technology, Inc Virtual private network employing tag-implemented egress-channel selection
6532088, Sep 10 1999 WSOU Investments, LLC System and method for packet level distributed routing in fiber optic rings
6542466, May 20 1999 Google Technology Holdings LLC Communication network method and apparatus
6542502, Jan 26 1996 IBM Corporation Multicasting using a wormhole routing switching element
6553423, May 27 1999 Cisco Technology, Inc. Method and apparatus for dynamic exchange of capabilities between adjacent/neighboring networks nodes
6556544, Oct 22 1999 RPX CLEARINGHOUSE LLC Method and system for provisioning network resources for dynamic multicast groups
6608816, Nov 18 1998 RPX CLEARINGHOUSE LLC Method and apparatus for providing differentiated services using a multi-level queuing mechanism
6611522, Jun 19 1998 Juniper Networks, Inc Quality of service facility in a device for performing IP forwarding and ATM switching
6614781, Nov 20 1998 Level 3 Communications, LLC Voice over data telecommunications network architecture
6625169, Jun 14 2002 TeleSys Technologies, Inc. Integrated communication systems for exchanging data and information between networks
6625650, Jun 27 1998 U S BANK NATIONAL ASSOCIATION, AS COLLATERAL AGENT System for multi-layer broadband provisioning in computer networks
6629128, Nov 30 1999 MEC MANAGEMENT, LLC System and method for distributed processing in a computer network
6636516, Mar 17 1999 NEC Corporation QOS-based virtual private network using ATM-based internet virtual connections
6639897, Apr 22 1998 Nippon Telegraph and Telephone Corporation Communication network of linked nodes for selecting the shortest available route
6658013, Mar 23 1999 CIENA LUXEMBOURG S A R L ; Ciena Corporation Method and apparatus for ensuring survivability of inter-ring traffic
6668282, Aug 02 2000 TREND MICRO INCORPORATED System and method to monitor and determine if an active IPSec tunnel has become disabled
6697359, Jul 02 1999 CAVIUM INTERNATIONAL; MARVELL ASIA PTE, LTD High performance switch fabric element and switch systems
6697360, Sep 02 1998 Cisco Technology, Inc. Method and apparatus for auto-configuring layer three intermediate computer network devices
6701449, Apr 20 2000 CIPRICO INC Method and apparatus for monitoring and analyzing network appliance status information
6704318, Nov 30 1998 Cisco Technology, Inc. Switched token ring over ISL (TR-ISL) network
6738371, Sep 28 1999 Ericsson Inc. Ingress data queue management in a packet data router
6738821, Jan 26 1999 RPX Corporation Ethernet storage protocol networks
6775267, Dec 30 1999 AT&T Corp Method for billing IP broadband subscribers
6778502, Jun 18 1999 MOUNT SHASTA ACQUISITION LLC; Level 3 Communications, LLC On-demand overlay routing for computer-based communication networks
6785691, Oct 13 1999 AVAYA Inc Object oriented processing system and data sharing environment for applications therein
6802068, Oct 16 1996 International Business Machines Corporation Addressless internetworking
6816462, Aug 02 2000 International Business Machines Corporation System and method to determine connectivity of a VPN secure tunnel
6822958, Sep 25 2000 Integrated Device Technology, Inc. Implementation of multicast in an ATM switch
6868082, Aug 30 1999 IBM Corporation Network processor interface for building scalable switching systems
6883170, Aug 30 2000 ALVARIA, INC Method and system to maintain a hierarchy of instantiated application objects and to enable recovery from an applications failure
6894994, Nov 03 1997 Qualcomm Incorporated High data rate wireless packet data communications system
6907039, Jul 20 2002 Ericsson AB Method and apparatus for routing and forwarding between virtual routers within a single network element
6920146, Oct 05 1998 WSOU Investments, LLC Switching device with multistage queuing scheme
6920580, Jul 25 2000 NetApp, Inc Negotiated graceful takeover in a node cluster
6922774, May 14 2001 The United States of America as represented by The National Security Agency Device for and method of secure computing using virtual machines
6938097, Jul 02 1999 SONICWALL US HOLDINGS INC System for early packet steering and FIFO-based management with priority buffer support
6944128, Nov 18 1998 RPX CLEARINGHOUSE LLC Method and apparatus for providing differentiated services using a multi-level queuing mechanism
6944168, May 04 2001 RPX Corporation System and method for providing transformation of multi-protocol packets in a data stream
6954429, Apr 05 2000 Dyband Corporation Bandwidth control system
6980526, Mar 24 2000 TELECONFERENCE SYSTEMS LLC Multiple subscriber videoconferencing system
6985438, Sep 20 1999 Method and apparatus for processing and forwarding data packets
6985956, Nov 02 2000 Oracle America, Inc Switching system
6990103, Jul 13 1999 Alcatel-Lucent Canada Inc Method and apparatus for providing distributed communication routing
7020143, Jun 18 2001 Ericsson Inc System for and method of differentiated queuing in a routing system
7042848, May 04 2001 RPX Corporation System and method for hierarchical policing of flows and subflows of a data stream
7054311, Jul 27 2001 RPX Corporation Methods and apparatus for storage and processing of routing information
7082477, Apr 30 2002 Cisco Technology, Inc. Virtual application of features to electronic messages
7089293, Nov 02 2000 Oracle America, Inc Switching system method for discovering and accessing SCSI devices in response to query
7096495, Mar 31 2000 Intel Corporation Network session management
7149216, Sep 05 2000 Cisco Technology, Inc M-trie based packet processing
7221945, May 03 2002 Google Technology Holdings LLC System and method for establishing and controlling access to network resources
7225259, Feb 21 2001 NOKIA INC Service tunnel over a connectionless network
7243371, Nov 09 2001 Cisco Technology, Inc. Method and system for configurable network intrusion detection
7266120, Nov 18 2002 Fortinet, INC System and method for hardware accelerated packet multicast in a virtual routing system
7272643, Sep 13 2000 Fortinet, INC System and method for managing and provisioning virtual routers
7295116, Sep 01 2004 Microsoft Technology Licensing, LLC Architecture, programming model and API'S
7313614, Nov 02 2000 Oracle America, Inc Switching system
7316029, Oct 25 2001 T-MOBILE INNOVATIONS LLC Network security services architecture
7324489, Feb 18 2003 Cisco Technology, Inc. Managing network service access
7324889, Mar 20 2006 Nissan Motor Co., Ltd. Intake-air quantity control system of engine
7386010, Jun 13 2003 SMART PATH CONNECTIONS LLC Multiprotocol media conversion
7639632, Sep 13 2000 Fortinet, Inc. System and method for managing and provisioning virtual routers
7720053, Jun 04 2002 Fortinet, Inc. Service processing switch
7761743, Aug 29 2002 GOOGLE LLC Fault tolerant routing in a non-hot-standby configuration of a network routing system
7830787, Sep 25 2001 Cisco Technology, Inc Flooding control for multicast distribution tunnel
7881244, Sep 24 2004 Fortinet, Inc. Scalable IP-services enabled multicast forwarding with efficient resource utilization
7885207, Sep 13 2000 Fortinet, Inc. Managing and provisioning virtual routers
7912936, Sep 13 2000 Managing interworking communications protocols
7925920, Aug 29 2002 GOOGLE LLC Fault tolerant routing in a non-hot-standby configuration of a network routing system
7933269, Nov 18 2002 Fortinet, Inc. Hardware-accelerated packet multicasting in a virtual routing system
7957407, Aug 27 2003 Fortinet, Inc. Heterogeneous media packet bridging
7961615, Nov 18 2004 Fortinet, INC Managing hierarchically organized subscriber profiles
8068503, Jun 04 2002 Cisco Technology, Inc Network packet steering via configurable association of processing resources and netmods or line interface ports
8107376, Nov 18 2004 Fortinet, INC Managing hierarchically organized subscriber profiles
8208409, Jun 28 2001 Fortinet, Inc. Identifying nodes in a ring network
8213347, Sep 24 2004 Fortinet, Inc. Scalable IP-services enabled multicast forwarding with efficient resource utilization
8306040, Jun 04 2002 Cisco Technology, Inc Network packet steering via configurable association of processing resources and network interfaces
8320279, Sep 13 2000 Fortinet, Inc. Managing and provisioning virtual routers
8369258, Sep 24 2004 Fortinet, Inc. Scalable IP-services enabled multicast forwarding with efficient resource utilization
8374088, Nov 18 2004 Fortinet, INC Managing hierarchically organized subscriber profiles
20010028636,
20010033580,
20010043571,
20010048661,
20010052013,
20020023171,
20020062344,
20020066034,
20020075901,
20020097730,
20020097872,
20020099849,
20020152373,
20020186661,
20020191604,
20030026262,
20030033401,
20030108041,
20030115308,
20030117954,
20030131228,
20030169747,
20030185221,
20030200295,
20030212735,
20030223406,
20040037279,
20040042416,
20040095932,
20040095934,
20040141521,
20050002417,
20050055306,
20050113114,
20050147095,
20050163115,
20050213589,
20060087969,
20100142527,
20100146098,
20100146627,
20100189016,
20100220732,
20100220741,
20110122872,
20110235548,
20110235649,
20110249812,
20120057460,
20120069850,
20120072568,
20120099596,
20120131215,
20120324216,
20120324532,
20130022049,
WO51290,
WO76152,
WO163809,
WO223855,
WO3010323,
/
Executed onAssignorAssigneeConveyanceFrameReelDoc
Jun 06 2011Fortinet, Inc.(assignment on the face of the patent)
Date Maintenance Fee Events
Mar 17 2017REM: Maintenance Fee Reminder Mailed.
May 08 2017M1551: Payment of Maintenance Fee, 4th Year, Large Entity.
May 08 2017M1554: Surcharge for Late Payment, Large Entity.
Jan 30 2021M1552: Payment of Maintenance Fee, 8th Year, Large Entity.


Date Maintenance Schedule
Aug 06 20164 years fee payment window open
Feb 06 20176 months grace period start (w surcharge)
Aug 06 2017patent expiry (for year 4)
Aug 06 20192 years to revive unintentionally abandoned end. (for year 4)
Aug 06 20208 years fee payment window open
Feb 06 20216 months grace period start (w surcharge)
Aug 06 2021patent expiry (for year 8)
Aug 06 20232 years to revive unintentionally abandoned end. (for year 8)
Aug 06 202412 years fee payment window open
Feb 06 20256 months grace period start (w surcharge)
Aug 06 2025patent expiry (for year 12)
Aug 06 20272 years to revive unintentionally abandoned end. (for year 12)